Spotting the Adversary with Windows Event Log Monitoring PART 2
redblue.team